Is proton.me legit?
Proton.me appears to be a highly trusted service, with strong security and a long-standing online presence. While there are minor concerns around hidden content and payment methods, these don't detract significantly from its overall reliability.
VPN & Security average: 83/100 · based on 16 sites
Checked: April 18, 2026 at 8:19 AM UTC · Refresh
Is proton.me a scam? Here's what we found.
The site boasts an excellent security posture, utilizing modern TLS 1.3, HSTS, and a Content Security Policy for robust data protection. Google Web Risk found no threats, further solidifying its secure environment.
Proton.me has a strong and verifiable identity, with a domain aged over 15 years registered through a corporate registrar, MarkMonitor Inc. The clear WHOIS information tied to Proton AG inspires confidence in who is behind the service.
With a high Tranco rank, a long domain history, and a clean bill from DNS blacklists, Proton.me clearly holds a strong and established reputation in the online world. This longevity suggests a trusted and sustained operation.
While the site provides comprehensive contact information, legal pages, and a robust social media presence, the presence of multiple hidden content elements is a slight concern that could obscure certain aspects from users.
The site includes essential privacy and terms of service pages, indicating a commitment to legal and user obligations. The acceptance of non-reversible payment methods, while common in some tech services, warrants a note for consumer protection in case of issues.
Proton.me demonstrates a well-managed infrastructure, featuring robust DNSSEC, proper SPF and DMARC email authentication, and fast page load times. This ensures reliable and secure technical operations.
Signals Detected
This is a well-known, high-traffic website
Site uses structured data identifying itself as: WebSite
robots.txt has 6 directives and references a sitemap
This business has no Trustpilot presence — not unusual for smaller or newer companies
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
No threats detected by Google Web Risk
Mentions non-reversible payment methods: bitcoin
Excessive hidden content found — may indicate cloaking or deceptive content
Site has custom branding and social media metadata
Site maintains a proper sitemap with 24 indexed pages
Valid certificate, expires in 62 days
Certificate issued by Let's Encrypt
Connection uses TLS 1.3
Resolves to: 185.70.42.45
Mail servers: mail.protonmail.ch., mailsec.protonmail.ch.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns2.proton.me., ns3.proton.me., ns1.proton.me.
Not found on any DNS blacklists
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
Domain created 2010-10-10T21:20:51Z (15 years, 8 months ago)
Registered through MarkMonitor Inc.
Expires in 175 days
DNSSEC status from WHOIS
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.